Kaspersky researchers warn that most popular Docker Hub images contain critical vulnerabilities and insecure configurations, necessitating automated security scanning to prevent container-based cyberattacks and enterprise network compromises.

Key Points

• A study of 100 popular Docker images revealed that 64% contain critical software vulnerabilities, while only 10% are fully updated.
• Common security flaws include hardcoded plaintext passwords, excessive sudo privileges, and insecure file permissions like 777.
• Attackers frequently exploit outdated software, such as CVE-2025-49844 in Redis or CVE-2026-24061 in Nginx, to gain remote code execution.
• Kaspersky introduced an AI assistant named KIRA within its Container Security platform to identify misconfigurations and provide remediation guidance.
• Supply chain risks remain high, as infrequent updates leave systems vulnerable, while frequent updates can introduce malicious dependencies if not properly scanned.

Why it Matters

Containerized infrastructure has become a primary target for attackers seeking to deploy malware, steal data, or move laterally through enterprise networks. Implementing automated security audits and robust secret management is essential to mitigate the risks posed by vulnerable third-party images and configuration errors.